Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SecurityScorecard CEO Dr. Aleksandr Yampolskiy 2026 Predictions for Supply Chain Cybersecurity

It's that time of year again for SecurityScorecard 2026 predictions. CEO and co-founder of SecurityScorecard Dr. Aleksandr Yampolskiy shares his predictions for how CEOs will rethink supply chain cybersecurity in 2026. We have seen supply chain breaches take over the headlines and cyber risk is becoming more than just a TPRM & IT issue and is becoming a bigger boardroom issue.

Adversarial AI: The New Symmetric Threat Landscape

Adversarial AI is geometrically making cyber a symmetric threat, fundamentally altering the cybersecurity equation. However, there are leaders who have successfully navigated these emerging challenges and understand the implications. Join Dr. Aleksandr Yampolskiy (CEO & Co-Founder, SecurityScorecard) and Dr. Srinivas Mukkamala (CEO, Securin Inc.) as they dive into: SecurityScorecard monitors and scores over 12 million companies worldwide.

The CISO's Take: Securing the Future of Financial Services & More

New year, new threats… Except some aren’t so new; they’ve been years in the making. As the future of financial services evolves from relying on traditional banking to other platforms, securing our future requires practitioners to be more strategic than the threat actors after our assets. Join Aleksandr Yampolskiy and Jeff Lunglhofer for their take on: SecurityScorecard monitors and scores over 12 million companies worldwide.

Why Every CEO Needs a CISO or CIO on the Board and How to Get a Board Seat if You Are One

As boards face AI risk, digital transformation, and evolving regulation, technical expertise has become essential. But when it comes to board seats, CISOs or CTOs are often underrepresented. Speakers Dr. Aleksandr Yampolskiy, Co-Founder and CEO of SecurityScorecard | Beth Stewart, Founder and CEO of Trewstar Corporate Board Services SecurityScorecard monitors and scores over 12 million companies worldwide.

Head of Public Policy Mike Centrella talks CISA Shutdown Updates - Nov. 13, 2025

News alert: With the government shutdown coming to an end, the continuing resolution includes the extension of CISA 2015 (Cybersecurity Information Sharing Act). However, sustained information sharing isn't optional, it's crucial for national resilience and security. A reinstitution of CISA 2015 for the coming weeks is just the beginning. "Timely, trusted threat intelligence sharing is foundational to both national security and private sector resilience.".

What Is a Supply Chain Attack?

A supply chain attack does not start with your firewall. It starts with someone else’s. Instead of targeting your company directly, a cyber attacker looks for weak spots in your organization’s supply chain. That could be a trusted third-party vendor, a widely used software supplier, or even an outdated package from an open-source code repository. Once they find an opening, they exploit security vulnerabilities to gain access to your systems without ever going through the front door.

Safeguarding Against Subdomain Takeover

Subdomain takeovers are a growing threat in today’s cloud-first ecosystem. As organizations rely on third-party services, continuously launch digital assets, and manage sprawling DNS configurations, they often leave behind vulnerable subdomains ripe for exploitation. In this article, we explore subdomain takeovers, why they pose such a serious risk, and most importantly, how to prevent them before threat actors strike.

Guide to Developing a Business Continuity Plan

In today’s threat-heavy digital environment, having a Business Continuity Plan (BCP) isn’t just smart, it’s essential. Whether it’s a cyberattack, data breach, ransomware, or natural disaster, organizations need a strategy to mitigate risks, reduce downtime, and ensure continued operations. This guide walks you through how to develop a cyber-ready BCP that protects your organization from disruption and prepares you for the unexpected.

CISOs: The Perfect SCORE With Your Board

You’ve done the work—mapped the risks, built the roadmap, secured the right tools. But when it’s time to face the board, the conversation stalls. Not because you’re wrong. Because you’re speaking a different language. Boards don’t operate in threat models and tech stacks. They operate in risk, revenue, and accountability. And if you want their support, you need to meet them there.